rpc.pcnfsd remote format string exploit for AIX versions 6.1.0 and below.
9608caf3a078bffe08324219439a68fb2fc7292b8e1b12c4e24838f89c4b78faTwo working proof of concept exploits for a stack overflow in Ghostscript. One works against PCBSD exploiting the vulnerability through CUPS. The other creates a .ps file that will trigger the vulnerability.
5ae9270895d3e789549d5022b11b8a33534564778a2cf307bd28c33902b28c71The XINHA Editor plugin ExtendedFileManager suffers from a cross site scripting vulnerability.
fc5ec831e8a2a4b95a06b33b4db1fe0d490c0f788e0c40df776fccba3307971fThe Joomla StaticXT component suffers from a remote SQL injection vulnerability.
9f31191e7f84c01715e8a65e2520a1b79d2ce32c84275e14256876094454ed0fCalendarix suffers from a remote SQL injection vulnerability.
76758a117b5ad462487c575924f29db1adfdb8b48db562060c4132739450e510Subrion Auto Classifieds suffers from a persistent cross site scripting vulnerability.
7b5b14512234b69cd919bd4751c6c8cdaf6e8e20353d08fd54cf4cab18de1846Sikkim Manipal University suffers from a remote SQL injection vulnerability. Calcutta University is spreading malware via a malicious iframe.
2148733b2c9b4405f7264090ad82f858013ee651fc0777be81306f76469feba8YACK CMS version 10.5.27 suffers from a remote file inclusion vulnerability.
a80bfd7ec0bf2129c05afb62ed52f6bb8dffd1b153a71e0b2ee241b071481d91Netkeys generates the factory password for Netopia routers which bypasses any required admin password. Included is a now obsolete default WEP key generator. Win32 exe included with sources.
f7f5bac794dbbe55826d5da396d7831a813f7ea20c6602e1042fca43c18c1a91iOffice version 0.1 suffers from a remote command execution vulnerability.
458e25789783db51ca0ab9861ca489e7c285a19933f5c4a69b8b9b0c0ba15ee0adsuck is a small DNS server that spoofs blacklisted addresses and forwards all other queries. The idea is to be able to prevent connections to undesirable sites such as ad servers, crawlers, etc. It can be used locally, for the road warrior, or on the network perimeter in order to protect local machines from malicious sites.
61be7d56066601e54db65f5e9f1aa8b69a6ed3c8512cbae8293e837b7755b128PHP-Fusion suffers from a remote command execution vulnerability.
976bd9388e8d82c635248b19c6a82ee1faf39dee2c5a6ebc613df2dae2153d4cFreelancers Marketplace Script suffers from a shell upload vulnerability.
a28d12d4100b45a2c0e83859722eff9993a04723419d762e09212b802f9858d8Freelancers Marketplace Script suffers from a persistent cross site scripting vulnerability.
9b2015332ad681883016fd0d08cdb18a4f5b7b0684cf19881f200c6f197807aaThe Joomla SPA component suffers from a remote SQL injection vulnerability.
736fbe9e1e46d5acf4f55afc0e8d94ddf53c8a4ef1cea28805afdd49cfea11d4Kayako eSupport version 3.70.02 suffers from a remote SQL injection vulnerability.
c21016562a10351e8331365cfc92eb2971440acb843cfe7044b22a58594b26e7Easy FTP Server version 1.7.0.11 CWD command post-auth remote buffer overflow exploit.
0e5afb9d2d4d68e8cc20883e5970167b4b47818ba2a76a82ab5176f66cd07cb9Easy FTP Server version 1.7.0.11 LIST command post-auth remote buffer overflow exploit.
d1e6f817a66ed71281c4c1920cb0216d75cb0139ee45bf7395aae21774fc1c24Kayako eSupport version 3.70.02 suffers from a remote SQL injection vulnerability.
e0d55cc4014d5ad82cefd09fe25b76c52f503ac0f1137d7a9095021bdca36875ClickAndRank Script suffers from a remote SQL injection vulnerability that allows for authentication bypass.
c1f0d0f3ce7451d7e4ab8651042b9667af817955c8e77e33e44e7b6c8106af7dEasy FTP Server version 1.7.0.11 MKD command post-auth remote buffer overflow exploit.
5e37423f9c90a9b9b2c38af8b5cb1d64f13a2bc9b0818c75a12b6aba05eea66fNetscape Browser version 9.0.0.6 clickjacking proof of concept exploit.
a97b5d162bdb289c3c56bd5328ad7a284f98b1b0906436a6922b33423cd0e1b1Safari Browser version 4.0.2 clickjacking proof of concept exploit.
92a97e4e201eceb00f7b12084f91153b1727872eac7289f9bf13a909e4bc50c0Opera Browser version 10.60 clickjacking proof of concept exploit.
ccf51b795e47ea2e47274de27433e355d7d39e55d0dc0274ccdc424ffc8a193dAvant Browser version 11.7 build 45 clickjacking proof of concept exploit.
435a77eae99b8b2e485547ee5eed7b0ca3cc03a847f4250367fa00fc7d102f09
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed